/srv/irclogs.ubuntu.com/2011/10/24/#ubuntu-server.txt

Patrickdkthere is none, that I know of00:00
Patrickdkthis is what pre-up, up, post-up are useful for00:00
twbkaushal: one moment00:25
twbkaushal: here is mine http://paste.debian.net/139315/00:26
kaushaltwb: ok00:26
kaushaltwb: if i just set gateway someip in /etc/network/interfaces ?00:27
kaushalis that sufficient ?00:27
twbkaushal: that depends what you want.00:28
kaushalI mean make it permanent00:28
kaushalam i doing it wrong ?00:28
twbProbably.00:28
kaushaltwb: Probably ?00:29
kaushalnot sure i understand00:29
twbkaushal: I mean: I think you're an idiot, and you want someone to do your homework for you.00:29
kaushaltwb: mind your words ?00:31
kaushalits pretty bad00:31
twbI have a bunch of LXC jails, which drop SYS_ADMIN, and thus cannot lower niceness levels.  Cron is hard-coded to do so, so I get messages like this: bleed CRON: pam_limits(cron:session): Could not set limit for 'nice' to soft=20, hard=0: Operation not permitted; uid=0,euid=000:34
twbNow, this I can understand, but recently I created a new jail, and for some reason it is saying the same with uid=20 instead of uid=0.00:35
twbHow can this be?  That uid is not in use, and UIDs below 100 are reserved for distro-wide hard-coded use.00:35
amerowhy in oneiric, nic aliasing only show the main ip of the nic?01:31
twbamero: pastebin the output of "ip a"01:31
patdk-lapwho exactly are you *showing* this info?01:32
twbs/who/how/ ?01:33
ameroi could see all the additional ips in 'ip a' but not in ifconfig -a01:33
patdk-lapheh, it worked both ways :)01:33
twbamero: that's because ifconfig is crap01:33
patdk-lapipconfig has been depressiated a long time ago01:33
twbamero: it predates the idea that interfaces can have >1 address01:33
patdk-laphow did you make the alias?01:33
twbpatdk-lap: er, *ifconfig; *deprecated.  Go drink some coffee :-)01:33
patdk-lapheh01:34
twbAnd "depreciated" is something that happens to money, not code01:34
patdk-lapwell, it happens to code :) we just call it bitrot :)01:34
patdk-laplooks like ubuntu opted to not fix it, but passed it upstream to debian, and waiting for them to fix it01:38
patdk-lapbug #87682901:39
uvirtbotLaunchpad bug 876829 in ifupdown "Oneiric's ifupdown breaks ip aliases" [High,Triaged] https://launchpad.net/bugs/87682901:39
twbpatdk-lap: wow, someone actually made a nontrivial change to ifupdown?01:49
twbLike, made it use ip(8) ?01:49
* stgraber notices a familiar bug # :)01:50
stgraberso yeah, regarding that bug, I'm not familiar enough with ifupdown's code to fix it, especially as the bug is in Debian's 0.7 branch too01:50
twbifupdown is fucking awful code01:51
stgraberthe aliasing actually works (as in, the IP gets assigned to the interface), the problem is the missing label01:51
stgraberso hopefully now that the source of the problem is known, it should be quite easy for the author to fix it. Once it's fixed upstream, I'll try to isolate the fix and push it to Oneiric as an SRU.01:51
patdk-lapstgraber, should be a simple fix :)01:52
patdk-lapfigured someone would have patched it by now though01:53
patdk-lapmaybe if I have a moment this week I'll make one01:53
patdk-lapbut that big isn't big for me, as I don't use oneiric01:53
patdk-laphmm, 7hours before I can verify this patch works :(01:57
stgraberpatdk-lap: I started looking at the diff last week, though the 0.6 -> 0.7 diff is pretty big so figuring out exactly what broke wasn't too trivial. Though now that I know it's definitely label related, pin pointing the change and reverting/fixing it should be a lot easier.02:30
stgraberI may try to do that next week if I'm not too busy with pre-UDS preparation02:30
patdk-lapstgraber, can I see the diff?02:40
patdk-lapit really should be a very simple patch, should be pretty ovious02:40
stgraberpatdk-lap: http://pastebin.com/p2Eht102 is the diff from 0.6.10ubuntu5 to 0.7~alpha5.1ubuntu1 (so basically from the latest 0.6 release to the earliest 0.7 release)02:46
stgraberpatdk-lap: http://pastebin.com/d40HanPQ when restricting to ifupdown.nw02:48
patdk-lapthere you go :)02:52
patdk-lapthat paste pastebin02:52
patdk-lapline 94002:52
patdk-lapip link set dev %iface% up label %iface%02:52
patdk-lapshould do it02:52
patdk-lapmaybe for 985/986 also? or is that part of a comment?02:53
twbI thought ifupdown 0.7~a was still classed as "here be dragons"02:53
patdk-lapactially, I wonder if that would work02:56
patdk-lapwonder what iface is set too there02:57
patdk-lapI'll have to install an oneiric machine and play02:58
stgrabertwb: yeah, my understanding is that we got it in Oneiric to have it well tested for the LTS and because we wanted IPv6 support02:59
twbI guess02:59
patdk-lapipv6 support for what?02:59
stgraberpatdk-lap: IIRC ifupdown 0.7 brings a few more options to "inet6 static" and the one currently in Debian brings dhcpv6 support too03:00
patdk-laphmm, I haven't done dhcpv6 yet, just stick with static and auto v6 so far03:01
twbThe main use is resolv.conf03:01
bao_how to delete mysqmail03:11
TakyojiAnyone know of a way to have scripted input for debconf when installing packages that require human input? (such as for the case of deploying the installation of something across a network of systems, silently; without having to put in data manually at each system.03:33
twbTakyoji: DEBIAN_INTERFACE=noninteractive03:33
twbBut you probably want something like puppet03:34
Takyojibecause I'm trying to deploy a LDAP/NFS setup on fresh installations and so on03:34
Takyojiahh; apparently you can even just set it (as a variable) before any apt-get command rather than having to permanently set it, as I thought was the only option03:44
twbAlso preseeding03:44
Takyojipreseeding being?03:51
uvirtbotNew bug: #813398 in lxc (main) "lxc-create -t ubuntu spews locale errors " [Low,Won't fix] https://launchpad.net/bugs/81339803:51
twbTakyoji: answering questions in advance03:51
twbLike debconf-set-selections <<<'ldap-auth-config ldap-auth-config/override boolean false'03:52
TakyojiI'm most likely to be going without puppet; I pretty much already have a bash script written03:52
Takyojiwith non-interactive; does that mean you can just specify the values using stdin, or?03:53
twbTakyoji: no, it means you can't specify anything03:54
TakyojiSo it just ignores the configuration part entirely?03:54
twbIt doesn't prompt you at all03:54
ZanzacarHi I am trying to mount a western digital usb hdd. but I am runing into errors03:54
Zanzacarmount -t vfat /dev/sdc /media/external -o uid-1000,gid=1000,utf8,dmask=027,fmask=13703:54
Zanzacarthat is the command I used.03:54
Takyojiso it assumes some default value instead then, or?03:54
twbTakyoji: it'll take the defaults (or preseed), yes03:55
twbTakyoji: occasionally it'll email you (e.g. debmirror) if there is no useful default03:55
Zanzacarit said wrong fs type, bad option, bad superblock on /dev/sdc03:55
Takyoji/dev/sdc is a whole harddrive, not a specific partition03:55
twbZanzacar: try sdc103:55
Zanzacartried that got the same error03:55
twbZanzacar: pastebin "cat /proc/partitions"; pastebin "file -s /dev/sdc*"03:56
ZanzacarI was following the ubuntu help guide on it till I got the errors then came here.03:56
twbMake that "sudo file -s /dev/sdc*"03:56
Zanzacarhttp://paste.pocoo.org/show/497153/03:57
Zanzacarhttp://paste.pocoo.org/show/497154/03:58
twbBlergh03:58
twbWell, /dev/sdc1 is definitely right, so something else is wrong -- like maybe you weren't running mount as root?03:59
twbSurprised they're shipping with FAT though, you'd think NTFS would be saner...03:59
ZanzacarI had a typo, uid-1000 needed to be uid=100004:00
Zanzacarsorry about that guys04:00
twbZanzacar: oh, sorry I didn't spot that04:02
Zanzacarno I just need to figure out how to copy all .mp4 movies over to the hdd haha.04:05
twbupsmon to upsd, that's client pull oriented, right?04:05
Zanzacaryay I figured it all out, now I can copy 125gigs in less then 5 days.04:14
Zanzacarusb vs. lan...... lan wins04:14
Zanzacarwhoops04:14
Zanzacarusb vs ftp.... usb wins04:14
Zanzacarhaha04:14
nathwillzanzacar: sneaker-net always wins :)04:18
twbstation-wagon full of tapes04:18
Zanzacarwhat is flush-8 command? I am copying a bunch of movies from my server HDD to a fat32 HDD04:39
ZanzacarI am looking at my IO read writes and its says its reading and writing a lot04:39
Zanzacarman pages says something about email, smtp but I didnt think I had a mail service on this server04:40
twbZanzacar: it's probably a kernel thread responsible for getting the data onto the actual platters of the disk04:40
twbZanzacar: it's 8 because you have 8 CPUs04:40
twbZanzacar: the anpage04:41
twbZanzacar: the manpage is for postfix; unrelated04:41
Zanzacartwb: thanks I was wondering why it didnt make any since.04:41
twbIf you're in top and you hit "c", or in ps auxf output, kernel threads have []'s around them04:41
Zanzacarth0mz: thanks for the info04:41
Zanzacartwb: O thats pretty cool, ya it says its a kernel thread04:42
twbYeah, well, they piss me off04:42
twbps auxf | grep -v ]$04:42
Zanzacarthe kernel threads piss you off?04:43
Zanzacaro thats really cool its like a tree of where the commands are coming from basically?04:45
twbThey piss me off when they fill up the first three pages of top because I have 8 cores instead of 204:51
ZanzacarI am still learning all this, I only started using linux about 2 months ago maybe.04:55
Zanzacarhad a server up after about 1 month.04:55
Zanzacarevery problem I run into I try to figure it out research it, etc.04:55
ZanzacarI did a bunch of bash stuff but got really frustrated with the syntax so I learned python instead.04:56
ZanzacarAll I know is now that I know linux I never want to go back to pc04:56
twbI don't really care about your personal epiphanies.04:58
Zanzacartwb: ok05:00
TakyojiHow do you specify a preseed file when installing packages with apt-get? Or do I just append it to some system-wide file, or?05:06
twbTakyoji: you pass it to debconf-set-selections before installing the package in question05:11
Takyojiahh, I think I understand what you were specifying earlier.05:12
twbQuite05:12
Takyojiand you generate the preseed config how? Do the installation as normal and get the added info to debconf-get-selections, or?05:14
twbTakyoji: using your brain05:25
twbdebconf-get-selections helps05:25
josePhoenixSo, I just did do-release-upgrade... it's been stuck on installing a new version of /etc/mysql/debian-start for a few minutes.05:31
josePhoenixHow long until I should be worried?05:31
josePhoenixWell.. I'm already worried. How long until I should ctrl-c? Or what should I do?05:34
RoyKjosePhoenix: you may want to try to strace it05:35
josePhoenixI don't know which process invoked by do-release-upgrade is actually running05:36
josePhoenixah, pstree..05:36
twbjosePhoenix: if you interrupt d-r-u it'll explode05:37
twbjosePhoenix: it really doesn't cope well with that05:37
josePhoenixOkay, noted05:37
twbat least, that's my experience -- I get told off for bad-mouthing d-r-u all the time05:37
josePhoenixcan I kill the hung process (looks like restarting mysql) and will d-r-u move on05:38
josePhoenix?05:38
twbDunno05:39
josePhoenixSo... what's the least-bad way out of here?05:39
twbProbably kill it off as cleanly as possible, then pick up the pieces05:40
twbI would try killing off just the mysql restart at first05:40
josePhoenixCool, that seems to have gotten it moving again05:40
josePhoenixI guess I have to figure out why mysql won't start some other time -.-05:41
twbCos it's crap05:41
twbpostgres ftw05:41
josePhoenixWell yeah05:41
josePhoenixhave to support both though05:41
josePhoenixnot my choice05:41
twbStupid users :-/05:41
josePhoenixyou're telling me05:42
twbJust tell them it's a security risk05:42
josePhoenixand they'll complain about not being able to use wordpress05:53
josePhoenixwhich is also a security risk >.>05:53
twbhear, hear06:00
josePhoenixWhat the hell06:09
josePhoenixHave a script that spawns some processes on boot (using "@reboot" in a user crontab)06:09
josePhoenix60 sec after they're spawned, they get SIGKILL and exit06:09
josePhoenixIs there some kind of throttling going on?06:10
josePhoenixno, that's not it.. those lines don't show up until later06:12
twbjosePhoenix: what's the proc named?06:31
twbA thing I've seen sometimes is the init script does like "killall squid" and kills both the squid process and itself, because it's called /etc/init.d/squid06:31
josePhoenixI think I figured it out.. apparently php5-fpm doesn't clean up its own pid file, and my startup script isn't handling that nicely06:31
josePhoenixHm. How can I find per-user crontabs? I need to update this in a few users' crontabs at once06:58
twbjosePhoenix: /var/spool/cron/ somewhere06:58
twbNot sure if you should be blatting them directly, though06:59
josePhoenixIsn't that warning just because cron needs a sighup to know to rescan the crontabs?06:59
josePhoenixI'm going to be rebooting anyway06:59
twbsomething like that, yeah06:59
josePhoenixmight be able to fix this without touching the crontabs though... so that'd be nice07:02
jamespage_morning all07:45
RoyKmorning07:48
elz89morning all, what would be the best way of making all of my ubuntu client single sign on against my fresh install of oneiric server?08:08
=== almaisan-away is now known as al-maisan
=== RudyValencia- is now known as RudyValencia
=== RudyValencia- is now known as RudyValencia
TeTeTelz89: probably via LDAP authentication, https://help.ubuntu.com/community/OpenLDAPServer and https://help.ubuntu.com/community/LDAPClientAuthentication08:29
elz89TeTeT: thank you08:29
uvirtbotNew bug: #880716 in squid (main) "package squid 2.7.STABLE7-1ubuntu12.4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/88071608:57
lynxmanmorning o/09:11
koolhead17hi all09:33
uksysadminhello koolhead1709:57
koolhead17hey uksysadmin !!! how are you sir? :)10:02
koolhead17lynxman: hola10:02
koolhead17hey Daviey10:02
uksysadminI'm good thanks. and you?10:04
koolhead17uksysadmin: am awesome!! so how is hacking coming along?10:04
trapmaxlogcheck gives "subprocess installed post-installation script returned error exit status 2" on 10.04. after failed upgrade aptitude shows partially installed. how do i fix this?10:08
trapmax*partially configured10:08
uksysadminI like awesome. I'm getting there. I know the #juju channel will like me saying this - but that's equally as awesome (and all I've done is type juju bootstrap and juju deploy a mysql server!) lol10:12
koolhead17uksysadmin: yes juju rocks!!  you can try charm for CMS like drupal or wordpress as well :)10:13
uksysadminindeed - I'm following kim0 tutorial and its working10:15
uksysadminjust limited in hardware at the mo which is being alleviated this week and over the next few weeks10:16
koolhead17uksysadmin: awesome!! :)10:16
uksysadminindeed10:17
uksysadminubuntu rocks [just trying to get it back on track for this room] ;-)10:17
koolhead17uksysadmin: i need to install oneric as well on my laptop to use LXC and stop using AWS for deplyment test10:17
uksysadmin(that's me standing on the stage and saying "Anyone here use Ubuntu?" followed by cheers... ;-)10:18
* koolhead17 thinks most folks around here are still in weekend hangover!1 :P10:18
uksysadminyeah I need to do that - but I'm primarily focussed on OpenStack so providing I can get that up and running then do juju stuff to install to it - that's enough for a couple of demos to the engineers and execs here to show the power of it all10:19
koolhead17hmm.10:19
uksysadminbtw - I wouldn't upgrade to oineric on a desktop... its great for the OpenStack stuff, but Unity sucks (sorry for those who like it and have allegiance to it - its not for me) plus its buggy as hell.10:20
* uksysadmin puts flame-retardant underwear on10:21
koolhead17uksysadmin: we are server folks here, and you always have choice :D10:21
koolhead17i will install xubuntu/lubuntu on my netbook10:22
uksysadminI've had about 10,000 hits over a few days to my blog since putting up a fix that is caused by an upgrade to 11.04 to 11.10 in some circumstances.10:23
uksysadminthat's not the desktop distro that has previously "just worked" out of the box that people came to love10:23
uksysadminthough us Linux folk are fickle I guess - and that comes through choice.10:23
koolhead17:P10:24
koolhead17uksysadmin: am using LTS on my desktop10:24
koolhead17currently10:24
uksysadminkeep it that way ;-)10:24
w00uksysadmin, link to the post?:)10:26
koolhead17w00: google for uksysadmin i think :D10:26
w00oh right10:26
uksysadminhttp://uksysadmin.wordpress.com/2011/10/14/upgrade-to-ubuntu-11-10-problem-waiting-for-network-configuration-then-black-screen-solution/10:26
w00oh, i read that already cause i got bitten by it :)10:27
* w00 thanks uksysadmin10:27
uksysadminw00, its poor for something that IMHO shouldn't have gotten past testing...10:27
uksysadminBUT - how many people upgraded 11.04 (or maybe earlier) to one of the betas? I didn't - I tested the betas using a fresh install10:28
w00uksysadmin, tell me about it, i'm kind of dissapointed as a user who just started using Ubuntu few months ago10:29
uksysadminI can only guess that it didn't handle /var/run (a mounted fs) in 11.04 and earlier which has files that possibly are in use because you're doing a live upgrade... it doesn't/can't remove it whilst its in use... so when you reboot /var/run doesn't have the needed structure that /run has which is a new tmpfs area10:29
trapmaxdpkg --configure logcheck also gives same error10:29
uksysadminand most/all packages refer to /var/run so 11.10 symlinks to /run... on a clean install this is the case, on an upgrade you're left with a /run that isn't linked to /var/run10:30
uksysadminits made worse by the fact it means networking fails - so if its your one and only desktop - you can't even google for a solution10:31
uksysadmindhclient eth0 (or whatever) will sort that out on a dhcp network - but desktop users who have ditched Windows for a cleaner experience mightn't know the magic keypresses and commands to get this going again.10:32
* uksysadmin stops ranting now10:32
koolhead17:P10:33
patdk-lapheh, I have had issues with tmpfs /var/run before10:43
patdk-lapmainly programs making subdirs in it, and using them10:43
patdk-lapthat means you either can't have them use /var/run, or you have to recreate that dir each boot10:44
=== al-maisan is now known as almaisan-away
uvirtbotNew bug: #880778 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration  cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/88077811:01
trapmaxhttp://pastebin.com/2QjTHNZS11:28
DavieyAnyone want to tackle a bitesize bug?11:30
koolhead17Daviey: ?11:35
Davieykoolhead17: bug 875262 is a good bitesize bug to tackle11:36
uvirtbotLaunchpad bug 875262 in php5 "PHP Startup: Unable to load dynamic library '/usr/lib/php5/20090626+lfs/sqlite.so'" [High,Confirmed] https://launchpad.net/bugs/87526211:36
koolhead17Daviey: waoo. i saw/faced it last night itself11:37
Davieykoolhead17: Great!  It should be pretty easy to fix... :)11:37
koolhead17during installation of owncloud211:37
uvirtbotNew bug: #880791 in samba (main) "Automated Bug Report during Oneiric Upgrade w/Samba" [Undecided,New] https://launchpad.net/bugs/88079111:38
Davieykoolhead17: note, you can't use UDD for it. :/11:38
koolhead17Daviey: show me the path o master!1 :)11:38
Davieykoolhead17: $ pull-lp-source php511:38
Daviey:)11:38
koolhead17k11:38
koolhead17Daviey: the suggestion was to remove /etc/php5/conf.d/sqlite3.ini as the same bug was reported for 8.04 as well11:41
Davieykoolhead17: *no*, /etc/php5/conf.d/sqlite.ini11:41
koolhead17Daviey: oops11:42
koolhead17yes11:42
koolhead17Daviey: am on it then. :)11:47
koolhead17i have it downloaded now.11:49
koolhead17Daviey: https://bugs.launchpad.net/ubuntu/+source/php-sqlite3/+bug/281714 are they both not linked ?11:52
uvirtbotLaunchpad bug 281714 in php-sqlite3 "PHP Startup: Unable to load dynamic library '/usr/lib/php5/20060613+lfs/sqlite3.so'" [Undecided,Confirmed]11:52
DavieyHah, no - they are opposite. :)11:52
Davieykoolhead17: That was a bug on hardy.11:53
=== mrmist is now known as dave2
=== dave2 is now known as Guest88551
=== almaisan-away is now known as al-maisan
koolhead17Daviey: yeah. so what about apps which uses sqlite not sqlite3 ?11:54
koolhead17even now?11:54
* koolhead17 is curious11:54
Davieykoolhead17: SoL11:55
koolhead17Daviey: SoL ?11:55
=== Guest88551 is now known as mrmist
koolhead17Daviey: sorry am finding too n00b with all the terms!! :D11:56
Ursinhagood morning11:59
Davieykoolhead17: sorry, Sad Out of Luck11:59
* koolhead17 writes the meaning in his slag list :D12:00
Davieykoolhead17: as per, bug 74732512:00
uvirtbotLaunchpad bug 747325 in sqlite "demote sqlite, or remove it from the archive" [High,Fix released] https://launchpad.net/bugs/74732512:00
lynxmanDaviey: hey small question for you, what's our HA ipvs of choice right now? :)12:11
Davieylynxman: simple answer?12:27
lynxmanDaviey: yeah12:27
Davieylynxman: We have none recommended.. If you want kernel level, ip_vs_dh12:28
DavieyI don't believe it is in Lucid.12:29
lynxmanDaviey: was looking for something with a bit more punch, virtual IP and active monitoring of DRBD12:30
sorenDaviey: Not in Lucid? Really? It was there in Hardy.12:31
sorenDaviey: It's there in Lucid, too.12:32
Davieysoren: Oh, i didn't realise it was a module in hardy or lucid.12:38
DavieyISTR having to do something funky when using it with Lucid, but i could be wrong.12:39
Davieylynxman: Really need more detail :)12:39
Davieylynxman: looked at pacemanker or drbd8 and OCFS212:41
lynxmanDaviey: pacemaker, that's it :)12:41
lynxmanDaviey: thanks!12:41
koolhead17Daviey: so is sqlite will be removed from precise :D12:48
sorenDaviey: Every single Ubuntu release ever has had it as a module.12:52
sorenDaviey: All the way back to Warty.12:52
amerosince ifconfig cant recognize alias nic in oneiric, what's the alt way to disable the alias nic?12:55
patdk-wkdamn, ifdown on a alias, downs the whole interface, but doesn't mark the raw interface as down13:02
patdk-wkthat is annoying13:02
ameroholy.. i was gonna try it with ifdown just now. so glad that i haven't done it13:06
* patdk-wk tests if this works for alias13:07
patdk-wkbut hmm, making ifdown not break everything will be harder I think13:07
=== flatline is now known as Guest83070
patdk-wkyep, quick easy fix to make ifup work :)13:12
patdk-wkin ifupdown-0.7~alpha5.1ubuntu5/ifupdown.nw13:14
patdk-wkline 4380, add: label %iface%, to the end13:14
* koolhead17 is bit excited13:15
patdk-wkI also did it on 4494, but probably not needed, but might be, for tun interfaces13:15
patdk-wkthe testbuild file needs to be edited to add the label onto those checks for all ipv4 tests though, easy enough13:15
patdk-wksee if I can locate the ifdown issue13:15
patdk-wkwell, locate is esay, fixing it not so much13:15
patdk-wkhmm, ifdown isn't too hard, depending13:21
patdk-wkneed to add label %iface% to the ip flush dev13:21
patdk-wkbut then, need not all link set down at all, or it brings the whole interface down13:21
UrsinhaDaviey, hello13:34
BrixSATHello13:34
BrixSATim trying to make wpa_suplicant connect to a hidden ssid but not successfull :(13:34
jdstrandDaviey: fyi, while cyrus-imapd-2.2 is in universe, I thought I might point out http://people.canonical.com/~ubuntu-security/d2u/. there are several simple merge candidates for several releases. this could be good practice for core-dev/motu for someone here14:14
jdstrandDaviey: and hello! :)14:15
=== cloakable_ is now known as cloakable
MuNk``Wondering if anyone here has had any success in getting Ubuntu to install on HP rx2620? after booting from the installation CD you enter setup and it then fails to continue to reconnize the CD anymore14:30
=== smb` is now known as smb
=== med_out is now known as medberry
Davieyjdstrand: Ooo, thanks!14:47
DavieyUrsinha: heya14:47
UrsinhaDaviey, hey14:51
Davieyhey Ursinha14:58
Davieyjdstrand: Am i being a banana?  There are not yet LP bugs for those CVE's are therE?15:00
Daviey(I assume you don't help a helper tool for raising bugs, where you throw in a CVE number? :)15:01
jdstrandDaviey: I don't see bugs for that, no. we also don't have a tool to add a bug to LP. I won't go into why, but suffice it to say that LP does not meet the security team's needs for CVE triage, and we work out of https://launchpad.net/ubuntu-cve-tracker (add bug references to it when they come in)15:03
jdstrandDaviey: if you open a bug, ping me and I'll add it to the open CVEs15:04
Davieyjdstrand: sad, it looked like LP did start to do some good stuff for CVE work.  I guess it didn't get finished.15:05
jdstrandDaviey: well, we need to track just way to much stuff. to get an idea, see README in uct15:06
Davieyjdstrand: It's been a few months since i tried to switch to uct, is it that time again to try again? :)15:07
jdstrandhehe15:07
Davieyjdstrand: is bug 880909 correct?  (series targets?))15:11
uvirtbotLaunchpad bug 880909 in cyrus-imapd-2.2 "bypass access restrictions for some commands" [Medium,Confirmed] https://launchpad.net/bugs/88090915:11
jdstrandDaviey: yeah. fyi, there is also CVE-2011-1926 and CVE-2011-320815:15
uvirtbotjdstrand: The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1926)15:15
uvirtbotjdstrand: Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3208)15:15
zulmornin15:15
Davieyuvirtbot: Yeah, i was about to open seperate bugs for those.15:15
uvirtbotDaviey: Error: "Yeah," is not a valid command.15:15
Davieyerr, jdstrand15:15
jdstrandack15:15
=== al-maisan is now known as almaisan-away
hallynstgraber, do you see any reason why we need resolvconf in the default list of packages installed by the ubuntu lxc template?15:50
hallyn(re bug 880020)15:50
uvirtbotLaunchpad bug 880020 in lxc "oneiric container install problem #1: resolvconf" [Medium,Confirmed] https://launchpad.net/bugs/88002015:50
stgraberhallyn: nope, it's actually the first thing I remove in my containers16:01
patdk-wkstgraber, I updated that ifupdown bug with a mostly working fix :)16:02
hallynstgraber, ok, i'm still wondering why that fails to install, but i'll go ahead and remove that16:05
hallyni guess we can just remove it upstream and let it trickle down?  or do you think it's more urgent than that?16:05
hallynit only fails when inetutils-ping is also in the packagelist, btw16:06
stgrabercool, I saw some comments in the debian bug too (for the ifupdown one)16:06
patdk-wkwhat is the debian one?16:07
patdk-wksee if I can steal any ideas to totally fix mine :)16:07
stgraberyeah, I'm fine with removing it upstream16:07
patdk-wknot that I care, as long as it's fixed for 12.04 :)16:07
dknhey all, accidentally mounted my external over a mount point that already had another partition mounted to it, everyworked, except, now the original mount is stuck and i can't stop the process relying on the mount, and i can't unmount cause the process is relying on it.... ? i'm sure a reboot would fix it, but i can't really do that right now16:08
stgraberits linked from the one in launchpad, sorry I'm on my cell :)16:08
patdk-wkno problem, just didn't notice it16:08
patdk-wkheh, the debian people are misdirected on this issue :(16:11
hallynstgraber, funky actually i think resolvconf isn't hte problem, but inetutils-ping16:13
* patdk-wk wonders if his email got lost, or if debian just takes forever to update bugs16:17
stgraberIt took alma16:18
stgraberdoh...16:18
stgraberIt took almost an hour last time I sent a mail to the bugtracker16:19
patdk-wkyuk16:19
patdk-wkheh, it updated :)16:26
* koolhead17 thinks why is he so dumb16:30
scalability-junkdoes someone have a rutorrent installation running on ubuntu 11.10?16:36
elz89Why is it that when I 'apt-get update' on a fresh oneiric install, the last package fails with Hash Sum Mismatch?16:43
rbasakDaviey: I've commented on bug 878180, you aren't subscribed. Not sure whether to put certain comments in the bug or the merge request or what.16:48
uvirtbotLaunchpad bug 878180 in xmlrpc-c "missing Breaks/Replaces" [High,Confirmed] https://launchpad.net/bugs/87818016:48
elz89I was told to uncomment the CD line in sources.list, but this does not help the matter, and I can't figure out why I have the same CD line commented twice. I really do not understand how a fresh installation can be bug ridden. This is not the first stupid and trivial little problem I have had with this new Ubuntu Server Oneiric either?16:51
Ursinhaelz89, after commenting the lines, did you run a sudo apt-get update16:53
Ursinha?16:53
elz89Ursinha: O it was you! lmao yes, of course I did, I just followed your instructions :-)16:53
Ursinhaelz89, :)16:55
Ursinhaelz89, and you keep getting the same error?16:55
Davieyrbasak: wow, helluva script16:55
elz89yeah16:55
rbasakDaviey: yeah well, it beats doing it by hand again and making mistakes :)16:56
rbasakDaviey: I don't expect that the script covers all cases but I'm pretty sure it covers this one OK16:56
rbasakDaviey: (since the results are almost identical to what I got by hand last time)16:57
rbasakDaviey: (and I've checked the differences by hand)16:57
elz89Ursinha: yes16:57
Ursinhaelz89, hmm.. can you paste the whole thing for me on a pastebin? pastebinit is a really useful tool to do that :)16:58
Davieyrbasak: well it looks good, but i am getting confused myself..16:59
Daviey:)16:59
rbasakLots of things changed between those three versions :)16:59
uvirtbotNew bug: #880968 in lxc (main) "natty containers do not shut down - ureadahead task keeps running" [Undecided,New] https://launchpad.net/bugs/88096817:02
elz89Ursinha: ok17:05
koolhead11grrrrrrrrrr17:05
koolhead11Daviey: am still at same :(17:07
=== Guest83070 is now known as flatline
hallynstgraber, are you still on cell phone?17:20
hallynstgraber, if not, could you review and sponsor http://people.canonical.com/~serge/lxc-resolvconf.debdiff ?17:21
uvirtbotNew bug: #880984 in cloud-init (main) "error resizing root filesystem" [Undecided,New] https://launchpad.net/bugs/88098417:36
stgraberhallyn: I'm back from lunch. Having a look now17:44
stgraberhallyn: oh nice, I meant to write that /run/lock fix as I had to do it for some of my containers already :)17:45
stgraberhallyn: patch looks good, uploading now17:46
* koolhead11 needs some help with pbuilder17:47
=== koolhead11 is now known as koolhead17
hallynstgraber, thanks17:48
koolhead17http://paste.ubuntu.com/718047/17:48
hallynguess i'ts time to sync lxc18:01
=== mconigliaro_ is now known as mconigliaro
BuenGenioguys, I will try to stay calm - it's 3am and I've been in the DC installing this new server for the last 6 hours19:06
BuenGenioI have one question19:06
BuenGenio# apache2ctl start19:06
BuenGenioAction 'start' failed.19:06
BuenGenioThe Apache error log may have more information.19:06
BuenGeniowhat is the flippin' problem?19:06
BuenGeniothe log file is empty19:07
BuenGenioand for some reason the apache binary can't tell me what the error is on the command line19:07
SpamapSBuenGenio: nothing in /var/log/apache2/error.log ?19:07
BuenGeniono19:07
SpamapSBuenGenio: did you try just 'apache2' ?19:07
BuenGenio apache219:08
BuenGenioapache2: bad user name ${APACHE_RUN_USER}19:08
SpamapSsudo -u www-data apache219:08
BuenGeniosudo -u www-data apache219:09
BuenGenioapache2: bad user name ${APACHE_RUN_USER}19:09
SpamapSoh haha right19:09
SpamapSsudo sh -c 'APACHE_RUN_USER=www-data APACHE_RUN_GROUP=www-data apache2'19:09
BuenGenio(2)No such file or directory: apache2: could not open error log file /etc/apache2/${APACHE_LOG_DIR}/error.log.19:10
BuenGenioUnable to open logs19:10
BuenGeniofinally something..19:10
RoyKBuenGenio: what's the owner/mode of that dir?19:10
SpamapSBuenGenio: that may be a red herring ;)19:10
SpamapSapachectl sets that variable IIRC19:10
BuenGeniowhere?19:11
RoyKSpamapS: shouldn't that be apaceh2ctl?19:11
SpamapSyeah19:12
BuenGenionow the error log says19:12
BuenGenio2)No such file or directory: apache2: could not open error log file /etc/apache2/${APACHE_LOG_DIR}/error.log.19:12
BuenGenioUnable to open logs19:12
BuenGenioroot@cyclon:/etc/apache2#19:12
RoyKBuenGenio: which distro version is this?19:13
BuenGenio11.1019:13
SpamapSHeh.. 11.10 and you're up at 3am to fix it?19:14
RoyKand, excuse me for asking, but why would you want to install something bleeding edge as oneiric on a server?19:14
SpamapSRoyK: there are plenty of reasons.. if your website is only going to live for 6 months.. ;)19:14
RoyKlol19:14
BuenGenioffs19:15
* SpamapS has flashbacks to consulting for "marketing companies"19:15
BuenGeniobleeding-edge?19:15
RoyKBuenGenio: it was released a week ago19:15
RoyKBuenGenio: use LTS for servers19:15
SpamapSBuenGenio: yes, 11.10 would be considered bleeding edge, having been released 2 weeks ago, and only having 18 months of updates19:15
BuenGenioyes, well19:15
SpamapSBuenGenio: still, it should work. :)19:15
SpamapSI switched to nginx on my test servers back in 11.04 or I'd test it out for you there... ;)19:16
RoyKSpamapS: famous last words....19:16
koolhead17and only having 18 months of updates19:16
RoyKBuenGenio: really, stick to LTS for servers unless you have a very good reason not to19:16
SpamapSBuenGenio: anyway, back to your issue....19:16
* RoyK hands BuenGenio a lucid cd19:17
SpamapSBuenGenio: how about 'sh -x /etc/init.d/apache2 start'19:17
SpamapSBuenGenio: thats going to print *a lot*19:17
SpamapSBuenGenio: but the thing I'm most interested in is the part where it execs apache219:17
BuenGeniohttp://pastebin.com/zsQS1wC919:18
* SpamapS loves a good debugging partner who knows how to pastebin fast. :)19:18
genii-aroundapache2 is not yet converted to upstart?19:18
SpamapSno19:19
SpamapSits probably never going to be19:19
RoyKSpamapS: why??19:20
SpamapSI honestly see no point in converting everything.19:20
SpamapSall the desktop stuff, the boot-supporting stuff, yes19:20
SpamapSbut once you get to runlevel 2 .. just start normally19:21
SpamapSRoyK: maybe when cgroups is in effect so we don't have to deal with expect fork.19:21
SpamapSBuenGenio: ls -la /var/log/apache219:21
* RoyK sometimes wonders why lucid was moved to upstart in the first place19:22
BuenGenio-rw-r-----  1 www-data www-data  563077 Oct 25 02:41 access.log19:22
BuenGenio-rw-r-----  1 www-data www-data   66324 Oct 23 16:54 access.log.119:22
BuenGenio-rw-r-----  1 www-data www-data     346 Oct 12 11:18 access.log.2.gz19:22
BuenGenio-rw-r-----  1 www-data www-data   28853 Oct 25 03:22 error.log19:22
BuenGenio-rw-r-----  1 www-data www-data  350245 Oct 23 06:25 error.log.119:22
BuenGenio-rw-r-----  1 www-data www-data    4675 Oct 16 06:25 error.log.2.gz19:22
BuenGenio-rw-r-----  1 www-data www-data 1161523 Oct 25 02:41 other_vhosts_access.log19:22
BuenGenio-rw-r-----  1 www-data www-data 1498700 Oct 22 12:39 other_vhosts_access.log.119:22
SpamapSBuenGenio: ack!19:22
BuenGenio-rw-r--r--  1 www-data www-data    8939 Oct 15 14:46 other_vhosts_access.log.2.gz19:22
RoyK!pastebin19:22
ubottuFor posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://imagebin.org/?page=add | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic.19:22
BuenGeniosorry19:22
SpamapSBuenGenio: looks like there's stuff in error.log19:23
BuenGenioit's way past my bed time19:23
BuenGenio;)19:23
BuenGenioSpamapS, I set LogLevel to debug19:23
BuenGeniothat's why19:23
SpamapSRoyK: upstart is necessary and useful for many, many things19:23
BuenGeniohttp://pastebin.com/SX9qfYjK19:23
RoyKSpamapS: sure, but sysv scripts work too.....19:23
BuenGenionothing unusual there19:23
SpamapSRoyK: but for just the run of the mill network services.. I don't really think its a place to focus much attention.19:24
SpamapSlike, samba is integrated into auth and boot stuff.. its all intertwined, and needs the event based approach to start when needed19:24
SpamapSbut apache.. apache just needs to work.19:24
zulapache and upstart? bah...19:25
SpamapSBuenGenio: do you by any chance have any *encrypted* SSL keys?19:25
RoyKBuenGenio: I'm just saying it'll be a lot easier to maintain the system if you chose lucid - it's LTS, supported until 2015...19:26
BuenGenioit just seemed natural to go for the latest version....19:26
SpamapSBuenGenio: think about how long that server is expected to live19:26
RoyKBuenGenio: I know, but on ubuntu, that's not the case for servers19:26
SpamapSBuenGenio: if its more than 18 months.. you *must* upgrade or be left without patches.19:27
RoyKBuenGenio: that's why there are two tracks, LTS and "normal"19:27
RoyKimho the "normal" track should be labelled "frequent"19:28
pmatulisBuenGenio: maybe 'sudo strace -o start.txt apache2ctl start' and pastebin start.txt19:32
BuenGenioI think it's done19:32
BuenGenioit was an SSL website19:32
BuenGenioI just toook it out ouf the config19:32
BuenGeniowell, can I not upgrade from 11.10 to an LTS release19:33
BuenGeniowhen it's out?19:33
pmatulisBuenGenio: yes, of course19:33
pmatulisBuenGenio: which is a very reasonable approach, don't let these guys scare you  :D19:34
BuenGenioi just wish it apache told me what the problem was right away =)19:35
pmatulisBuenGenio: you had an encryted ssl private key then?19:35
BuenGeniotayes19:36
BuenGenioyes19:36
alaingI'm not sure if this is the right place but here goes. I'm using ubuntu server edition 11.04 and apache. I've just installed coldfusion which by default places its admin pages under /var/www now I've moved those out inthe the filing system for security reasons. I'm getting the basic page layout but the css/images are not working because they looking for the files under /var/www is there away...19:38
alaing...I can get apache to redirect those requests to the new folder structure?19:38
cjs226where's the proper place to put an init script if not using upstart?  I've tried /etc/rc0.d/K01…  but it's not working19:39
SpamapSBuenGenio: actually thats most likely a bug in code that I wrote.19:41
BuenGeniowell, I hope I helped you fix it ;-)19:41
BuenGenioI'm really looking foward to bed now :P19:41
RoyKBuenGenio: 12.04 will be released in half a year or so19:42
SpamapSBuenGenio: SSLPassPhraseDialog  exec:/usr/share/apache2/ask-for-passphrase19:42
SpamapSBuenGenio: don't you still need that one SSL site to be up? ;)19:42
RoyKBuenGenio: and will change the update manager config to default to upgrading only LTS19:42
BuenGeniothanks guys, wiill parse the chat logs tomorrow ;)19:43
SpamapScjs226: /etc/init.d19:43
BuenGeniothanks19:43
SpamapScjs226: for all that I said about not using upstart.. I do think its easier to write an upstart job for simple services than it is to write a sysvinit script ;)19:43
SpamapSBuenGenio: anyway, when you're ready to try and fix that SSl site, try commenting that line out of /etc/apache2/mods-enabled/ssl.conf ... if that fixes it.. please file a bug. :)19:44
cjs226SpamapS: easier even for shutdown?  i need to include some logic and am thinking I'd rather just use init.d.  to my question, i have the script in /etc/init.d and link it to /etc/rc0.d/K01…  is that the correct procedure?19:44
SpamapScjs226: yes its easy for shutdown too19:45
SpamapScjs226: no, the correct thing to do is put the script in /etc/init.d , then use 'update-rc.d' to enable /disable it.19:46
cjs226SpamapS: true. i did that and it appeared to just link it like the ole days19:46
cjs226SpamapS: but didn't run upon shutdown19:47
SpamapScjs226: are you sure it didn't run? maybe it had an error19:47
cjs226SpamapS: i don't believe it did.  in fact i appended everything with a echo out to a log which was never updated.  ok, maybe i should start fresh.  if i wanted to use upstart, the normal logic, etc. I'd use in an init script would go in a pre-stop stanza?19:49
SpamapScjs226: depends on a few factors19:57
SpamapScjs226: if you need to do more than just send SIGTERM .. then yes, do that in pre-stop19:58
cjs226SpamapS: thx20:06
SpamapScjs226: also if you are doing anything that will take longer than 10 seconds, its advisable to 'stop on starting rc RUNLEVEL=[016]' and 'start on runlevel [2345]' ..20:08
SpamapScjs226: the shutdown only waits about 10 seconds for stuff to stop cleanly if it does 'stop on runlevel [016]'20:08
* RoAkSoAx will be back in an hour20:12
laurishi, what's the best choice of IMAP server on ubuntu?20:41
laurisin terms of security/performance20:42
jMCglauris: Last time I managed one, it was dovecot20:42
andollauris: Well, dovecot is at least not the wrong choice.20:42
jMCgThese days I use Zimbra.20:42
laurisi tried Zimbra once, the feel was like it is very heavy & slow20:43
* RoyK too20:43
RoyKthat is, I use zimbra20:43
RoyKit's on the heavy side, truely, probably because of the java bits, but it works well and is easy to administer20:43
laurishow about performance?20:44
RoyKbut then, you need a dedicated machine or VM with 2GB RAM or so20:44
RoyKlauris: sufficient20:44
jMCgI give mine about 3.5G, IIRC.20:44
laurisbroadly speaking, zimbra is an alternative to exchange?20:44
RoyKlauris: yes20:44
laurisRAM is cheap these days20:45
jMCgJava eats RAM, and lots of it. The more RAM you can spare the more performance it'll deliver.20:45
laurisso this is not an issue20:45
laurisis there a mobile app for zimbra?20:46
laurisiOS/Android20:46
RoyKlauris: depends how long you strech it ... MS concludes that memory overcommit isn't needed in hyper-v for that reason :P20:46
jMCgmemory overcommit isn't needed. [Period]20:48
lauris:))20:48
laurisi'll try it20:48
RoyKjMCg: it's very useful with xen and vmware .....20:49
jMCghttp://lwn.net/Articles/104179/20:50
jMCgThe red part is where they explain how memory overcommit + OOM killer work nicely together in an analogy understandable to everyone.20:51
jMCgRoyK: what works well for Xen and VMware is COW. And we've know and used that kind of stuff since ~1974. Even Linux has it.20:52
RoyKjMCg: memory overcommit in kvm sucks rather badly, it's better in xen and it works even better in vmware - I have that info from people who have used all of those platforms20:53
RoyKmemory overcommit != CoW20:53
laurisRoyK, does open source edition have all the features from commercial version?20:53
RoyKlauris: zimbra?20:53
laurisyes20:54
RoyKlauris: IIRC the OSS zimbra lacks some smartphone things, outlook connector and a few others - ask on #zimbra20:54
laurisoh, sorry :)20:54
RoyKnp, just pointing you to a better place ;)20:55
jMCgRoyK: my experience so far is limited to Xen and KVM, but the point I'm arguing against here I really experienced *in* the guests. I give them 4G of memory, they pretend to have unlimited amount, give it freely on malloc() and then start OOMkilling processes, because, low and behold, we're running out of *real* memory.20:55
jMCgThat's something I really like about Solaris: You want to spawn a process? You want a malloc()? Well sorry, no more memory. Let's start swapping like crazy. If you don't want to see this, buy more RAM.20:56
laurisRoyK, i found a page of product comparison20:57
RoyKk20:57
jMCglauris, RoyK - I use icssync for the calendar on my Android and the mail works just fine with the mail app.20:58
jMCgBut you don't get push.20:58
laurisfor my personal needs i use gmail, it syncs perfectly on my android phone :)20:59
jMCgWhile forwarding all my data to google for ad-analysis.20:59
RoyKthat's not really relevant to zimbra, is it? ;)20:59
Wietienkiehi, I'm having a problem with RAM detection on a 64bit installation21:03
Wietienkiethere's 6 GB in the server, but only 3 GB are recognised...21:04
WietienkieI'm using 10.0421:04
Wietienkieanyone know what might be the cause?21:04
Wietienkiebeen googling all evening, couldn't really find something21:04
RoyKWietienkie: what does uname -a have to say?21:06
uvirtbotNew bug: #881097 in ipsec-tools (main) "Please merge ipsec-tools 1:0.8.0-9 (main) from Debain unstable (main)" [Undecided,In progress] https://launchpad.net/bugs/88109721:06
WietienkieRoyK: already checked that, but here goes:21:10
WietienkieLinux hkserv 2.6.32-34-server #77-Ubuntu SMP Tue Sep 13 20:54:38 UTC 2011 x86_64 GNU/Linux21:10
Wietienkieso yeah, it's x86_6421:10
RoyKWietienkie: does linux see less memory than what's reported by BIOS?21:11
WietienkieI have no access to the bios now, sadly21:12
RoyKI guess you'll have to check that first21:12
RoyKalso, pastebin lshw output21:12
WietienkieI checked with cat /proc/meminfo though, and it reports 3GB only, so I do fear the bios sees 3GB only21:12
Wietienkiethe mobo is supposed to support 8GB21:13
Patrickdkif they installed high desity ram, instead of low density, then yes, it would do that21:13
Wietienkiehttp://pastebin.com/19sPbmDL21:15
Patrickdkmaybe they where put in the wrong banks?21:16
Patrickdkso that the 1g stick is paired with the 2gig stick? instead of 1g to 1g21:16
Wietienkiewell that's what I'm thinking of too right now, but I'm not sure though21:16
Wietienkieyeah, the 1 GB is paired with the 2 GB stick21:16
RoyKwierd - the DIMMs are therë... I've seen similar stuff on linux machines, though21:16
Wietienkiefffff, shouldn't have been so lazy and have looked up what's the best21:17
Patrickdkroyk, that isn't too odd :)21:17
Wietienkiedamnit, google is revealing something more to me21:17
Patrickdkthat just reports what the stick says it is, 2gigs21:17
Patrickdkdoesn't mean the computer can see the whole 2gig stick :)21:17
WietienkieDue to Intel 965 chipset limitation, max addressable memory is 4GB21:17
Wietienkiechipset is P965...21:17
RoyKPatrickdk: but 3GB? not 4?21:17
Patrickdkmost likely21:17
Patrickdkit limits each ram slot to 1gig21:18
Patrickdkactually, that was 64bit21:18
Patrickdkdepends21:18
Wietienkieyeah well, don't really get it21:18
Patrickdknot sure how that chipset works, it might use up that space for pci stuff21:18
PatrickdkI have had systems limited to 2.4gigs ram cause the rest was pci/pcie/agp crap21:18
RoyKPatrickdk: 1+2+1+2 should be either 6GB or 4GB IMHO21:18
WietienkieI know the P945 was a bitch on supporting max 4 GB while declaring to be 64 bit21:18
Wietienkiestrange thing21:19
* RoyK is off to bed - night all21:19
Patrickdkroyk, yes, but you have reserved memory space21:19
RoyKPatrickdk: not 1GB!21:19
Patrickdkif the computer can't map that extra ram to >4g, you loose it21:19
Wietienkiealso on the details of the motherboard it states it supports up to 8 GB21:19
Patrickdkroy, I have lost up to 1.5gigs cause of it21:19
RoyKsounds very unlikely21:20
RoyKbut then - it's late - night ladies21:20
Wietienkienight21:20
=== mconigliaro_ is now known as mconigliaro
=== skrewler_ is now known as skrewler
webPragmatistanyone have an idea how to get sftp to obey a umask22:46
webPragmatisti tried pretty much everything on http://jeff.robbins.ws/articles/setting-the-umask-for-sftp-transactions22:47
webPragmatistcurrently i have Subsystem sftp /bin/sh -c 'umask 0002; /usr/lib/openssh/sftp-server'22:47
webPragmatistalso tried modifying pam.d22:52
webPragmatist:(22:52
webPragmatistwhat the heck22:52
Takyoji[laptop]Is it possible to have apt-cache (or whatever works best) on a 10.04 LTS server and passively cache packages for 11.10 desktops?22:54
Takyoji[laptop]I'm working on a school setup; and the download speed is only ~1Mbps (T1)22:55
webPragmatistit doesn't run the .sh if i modify the Subsystem22:57
qman__Takyoji, yes22:58
qman__how you do it depends on which software you choose, but proxies will cache anything you want22:58
qman__and mirrors you have to set up each distro you want to mirror for22:58
Takyoji[laptop]So what would be a reasonable minimalistic setup for such>22:58
qman__caching proxy22:59
qman__probably apt-proxy or squid22:59
qman__mirrors are on the very costly side, proxies only keep what you download22:59
qman__but if your internet is really slow or unreliable a mirror may be the way to go23:00
Takyoji[laptop]and I'm also thinking what precautions would be needed for the sake of limiting it from being a way around the firewall23:00
qman__you run it through the firewall just like everything else23:00
Takyoji[laptop]But the server is exempt from all the rules23:01
qman__all it needs to do is download HTTP from the mirror sites23:01
uvirtbotNew bug: #881146 in samba (main) "doing a system upgrade (ubuntu natty to 11.10) samba cannot be upgrded.package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration  cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/88114623:01
qman__why, exactly?23:01
Takyoji[laptop]but anyway, doesn't apt-cache-ng pretty much passively cache?23:02
webPragmatistrather… the sftp-server.sh script works but umask 0002; does nothing23:02
qman__don't know23:02
qman__but the best way to do it IMO is a transparent inline proxy23:02
qman__no client setup needed23:02
Takyoji[laptop]I think the reason is: there's no internet access allowed at all, unless if you HTTP auth with the proxy23:02
qman__well, if you're already running a proxy, you'll have to configure that proxy to cache apt23:03
qman__you can't use two different proxies at once23:03
webPragmatistdir is drwsrwsr-x23:03
qman__or chain them with firewall trickery23:03
qman__but I can see that causing some issues23:04
qman__actually, you probably could use two different proxies if you configure apt to one and browsers to another23:06
Takyoji[laptop]but as stated, the server itself is exempt, thus doesn't even need to configure with a proxy. It's some awkward trickery of an Astaro server (or at least of how they configured it)23:06
qman__but it's still a mess you really don't need, just configure the one proxy23:06
Takyoji[laptop]my point is that I don't want the apt package cache as a way around the firewall for client desktops with malintent23:06
qman__then set the firewall up properly23:07
qman__the server shouldn't be completely exempt from the firewall, it should have exceptions for what it needs to do23:07
qman__but if your clients are already using a proxy23:07
qman__just configure that proxy to cache apt23:07
Takyoji[laptop]The reason for the firewall is so that you have to authenticate to get internet access entirely. I don't think there's any domain-specific restrictions or anything. Also, the firewall isn't a Windows/Linux system, it's some proprietary server rack, not even sure how it's configured23:08
qman__black boxes aren't good security practice23:10
qman__but even so, if you go the squid route, you can configure squid to only allow outgoing connections to the mirrors you want to cache23:10
qman__a site whitelist23:11
Takyoji[laptop]and yes, if I was the decision maker, I wouldn't have something that's pretty much a black box for security at all. xP23:12
qman__it's not that it's a proprietary system, it's that you don't know how it's set up and what it does23:12
webPragmatistdaskjfdsfjsdfsadiojf\\\23:13
webPragmatistwhat the heck23:13
SpamapSTakyoji[laptop]: so you can get the admins to poke a hole out for a restricted proxy, right?23:26
Takyoji[laptop]It's how they originally set it up; I haven't had any intervention23:28
Takyoji[laptop]Anyone know the different between apt-proxy and apt-cacher?23:29
Takyoji[laptop]difference*23:29
twbTakyoji[laptop]: yeah, they do the same job but were written by different people23:29
SpamapSTakyoji[laptop]: apt-cacher-ng is "the next gen" cacher.. I guess. ;)23:30
Patrickdkthey work differently though23:30
Patrickdkapt-proxy I thought worked before the fact, and apt-cacher was as needed23:30
twbI have used both, and they have lots of annoying heisenbugs23:30
Patrickdkapt-cacher is slower than dirt for me, apt-cacher-ng works good23:30
twbEither use a proper (if partial) mirror with debmirror or apt-mirror, or use a "dumb" cacher like squid23:30
Patrickdktwb, I have had nothing but issues with squid and .deb23:31
twbI use debmirror now and I have no problems with it, and the end result is MUCH fast23:31
twbPatrickdk: it's mainly an issue if you rice up your squid.conf, like "don't cache small files"23:31
Patrickdkapt-mirror is nice, just a huge hog if you don't need everything23:31
twbI don't know about a-m, but debmirror allows you to exclude stuff23:31
Patrickdktwb, na, I had it cache everything up to 20gigs23:31
PatrickdkI'm happy with apt-cacher-ng though23:32
PatrickdkI use one hostname for it23:32
twbShrug23:32
Patrickdkand use local overrides at different locations, so that it goes to my home apt-cacher-ng, or colo apt-cacher-ng if I'm roaming23:32
Patrickdkso I pretty much always have something relatively fast23:33
twbhttp://paste.debian.net/139591/ is what I do, it uses 78GiB today, and it pulls from an unmetered ISP mirror so I don't care.23:33
* Patrickdk is annoyed do-release-upgrade isn't using apt-get proxy settings :(23:33
twbAnd that means all my jails have a bind-mounted or NFS-mounted file:// mirror which means it's super fast23:33
Takyoji[laptop]also can a person resize a (md) software RAID 1? :P23:34
Patrickdksure23:35
Patrickdkjust give md a larger drive23:35
Takyoji[laptop]I mean smaller23:35
Patrickdksure, just reformat23:35
SpamapSActually I believe there is a known issue with squid and the archive having to do with Release and Packages files coming from slightly out of sync mirrors .. but it only should affect dev releases and occasionally security/updates when they change.23:36
Patrickdkdunno md supports that really23:36
Takyoji[laptop]When I was installing the OS through the alternate CD, it didn't really give me the option of more than one partition for the RAID23:36
SpamapSSomething to do with the mtimes and Expires headers that the mirrors give back23:36
Takyoji[laptop]and I hope I don't have to fully reformat and install again. xP23:36
Patrickdkspamaps, I seem to hit that issue a few times a week23:36
PatrickdkI finally gave up on squid23:36
SpamapSPatrickdk: yeah I think there may actually be investigation underway to handle this better23:39
PatrickdkI seemed to have pushed the ifupdown issue along on debian some23:40
Patrickdkbut someone with enough knowledge about it is going have to finish fixing it23:40
Patrickdkthat part doesn't sound promising23:41
SpamapSPatrickdk: working at using iproute2 for the static method?23:41
Patrickdkwell for aliases23:42
Patrickdkwould defently annoy me in 12.04 :)23:42
Patrickdkand my ipvs config23:42
Patrickdkthat is the whole point I'm here :)23:42
Patrickdkto push along things, and resolve issues that affect me :)23:42
PatrickdkI totally don't get whatever language ifupdown.nw is written in though23:44
SpamapSnowebm23:44
SpamapSIts C+postscript .. totally nuts23:44
SpamapS"literate" programming23:44
Patrickdkoh, a cobal offtake? :)23:44
SpamapSthe theory is you print out the program with its documentation or something like that23:44
SpamapSI find it to be *maddening*23:44
Patrickdkya, I had a huge issue attempting to tell code from documentation23:45
SpamapSbecause its not just nowebm that makes it hard to understand, it also does some weird, weird code generation23:45
Patrickdkthen I seemed to notice it was kind of like a badly made makefile23:45
Takyoji[laptop]So awkward that postfix is hinted to be installed when installing mdadm23:46
Patrickdkwhy?23:46
Patrickdkhow else would mdadm warn you of a bad drive?23:46
Takyoji[laptop]ahh, true23:47
SpamapSthe defn2c.pl script is my favorite23:47
SpamapSperl to translate some made up thing into C23:48
NicolasHi! I have a problem with setting up 2 network cards with 2 static ip adresses. I set up the /etc/network/interfaces file but no way I can bring eth1 to life... or eth0:1 just to give a try to the virtual network card.... Can somebody help? Thanks! (ubuntu 11.10 server 32 bit)23:48
matrix3000I need assistance with DNS, for some reason I am unable to establish a lookup from another system. When pointing to the bind dns server, on ubuntu, and i updated the /etc/resolv.conf on the client system to point to the ubuntu bind dns server I cannot browse the internet. Was there anything I am missing in terms of allowing a lookup against the root zone?23:48
Patrickdknicolas, what exactly is a virtual network card?23:49
omni_Is there a command to log out of a GUI back into terminal?23:49
Patrickdkomni_, ubuntu-server has no gui23:49
omni_Patrickdk, i know, i installed one and realized it was not what i wanted. Now when i re-boot i log into the Gnome and want to get out of it.23:50
NicolasPreickdk: I have just seen in many how to that you can set up virtual interfaces with this, but I have to phisical NIC, eth0 and eth123:50
Patrickdktotally not sure what exacly eth0:1 has to do with a virtual interface, *:x are aliases, not virtual23:51
Nicolasyes, alias, my mistake sorry23:51
Patrickdkwhat does ifconfig eth1 show?23:51
Nicolasthe thing is that a separate IP address is needed for one domain but the others are on a different and that is why i would like to setup eth123:51
Patrickdknothing in that last sentense made any sense at all, but it all sounds completely non-relevent23:52
Nicolasauto lo23:52
Nicolasiface lo inet loopback23:52
Nicolas# The primary network interface23:52
Nicolasauto eth023:53
Nicolasiface eth0 inet static23:53
Nicolas        address 94.247.88.16423:53
Nicolas        netmask 255.255.255.023:53
Nicolas        network 94.247.88.023:53
Nicolas        broadcast 94.247.88.25523:53
twbUrk23:53
Nicolas        gateway 94.247.88.123:53
Nicolas        #dns-* options are implemented by the resolvconf package, if installed23:53
Patrickdknicolas, you need lots of help23:53
Nicolas        #dns-search binga.hu23:53
Nicolasauto eth123:53
Nicolasiface eth1 inet static23:53
Nicolas        address 94.247.88.24523:53
Nicolas        netmask 255.255.255.023:53
Patrickdkuse a pastebin, and no one asked for that23:53
Nicolas        network 94.247.88.023:53
Nicolas        broadcast 94.247.88.25523:53
Nicolas        gateway 94.247.88.123:53
Nicolas        #dns-* options are implemented by the resolvconf package, if installed23:53
twbHe needs to have his network access administratively revoked23:53
Nicolas        #dns-search barnabees.hu23:53
Nicolasoops sorry :$23:53
Patrickdkthat config though, is totally messsed up23:53
Nicolasyes, I know :(23:54
Patrickdklinux really doesn't like to have multible nics on the same network23:54
Patrickdknormally you get lots of, packet received on wrong nic, errors23:54
twbPatrickdk: short of bridging23:54
twbNicolas: just put both addresses on one interface23:55
Patrickdktwb, wouldn't bridging just cause stp to make one not work? therefor fixing the issue?23:55
matrix3000anyone want to help me with a dns issue? basically i can resolve domains on teh dns, but it isn't using the root servers fro anything else23:55
twbPatrickdk: er, sorry, trunking23:55
Patrickdkya, trunking is totally different :)23:55
Patrickdktrunking/bonding23:55
uvirtbotNew bug: #881160 in samba (main) "package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: ErrorMessage: package samba is not ready for configuration  cannot configure (current status `half-installed')" [Undecided,New] https://launchpad.net/bugs/88116023:57
Nicolasand how can I do it?23:57
Nicolassorry I am very noob to this....23:57
PatrickdkNicolas, what is your goal?23:57
Patrickdkyou haven't told us what your attempting23:57
Patrickdkother then show us what you did, and we said, wouldn't work23:57
Nicolasmy goal is to make both IP addresses work, one is for only one domain and the other is for many23:58
methods1where are init jobs configured now ?23:58
methods1there is no more inittab right ?23:58
PatrickdkNicolas, what is *a domain*23:58
twbhttp://paste.debian.net/139595/23:58
twbNicolas: ^^ that is an interfaces stanza that puts multiple addresses on one interface23:58
Nicolasthere is a domain name that needed a separate ip addreess because of an ssl certificate or something like this and I got a new IP from the ISP and I would like to make it work in the sever23:59
Patrickdknicolas, ya, using eth1 is not going be easy for that23:59
Patrickdkuse eth0:1 instead23:59
Patrickdkand when you do that, use a netmask of 255.255.255.25523:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!